$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9849ddaa-8519-3b7c-bbc5-af656b2f8c63.roa File: 9849ddaa-8519-3b7c-bbc5-af656b2f8c63.roa (raw, json) Hash identifier: ho8361bIuCDmTdwqZ21UChVWWVy2OfatSXZVQO7yxd4= Subject key identifier: 3B:59:7C:CD:63:E0:91:C0:6B:39:42:F5:4B:20:52:3A:A1:BC:9E:7F Certificate issuer: /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd Certificate serial: 010D0C9F4328584F480D668843930B63EB4E44F0 Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9849ddaa-8519-3b7c-bbc5-af656b2f8c63.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 130.248.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:66:88:43:93:0b:63:eb:4e:44:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=b5be7e68-e005-459d-a207-bfa4df48ab50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:89:6d:11:db:e9:7d:5a:c0:39:1f:c1:15: fb:87:33:3b:77:5e:74:14:31:87:2d:ba:28:48:2b: 04:c8:88:1a:e1:2c:fb:b9:53:d0:9f:a1:57:4a:9b: c9:21:1e:16:40:9c:c6:de:22:af:d0:4f:f0:e7:f8: e7:db:bb:57:1e:b8:d6:6e:a8:8d:ab:c6:9a:3d:c0: 4a:e6:06:0d:54:e9:e7:f1:ff:c6:e2:06:1b:31:92: 48:7e:8b:32:fe:e4:c1:3c:8e:7c:7a:1e:71:c5:95: a5:be:4d:06:ee:b0:39:de:7e:97:54:f5:15:dd:26: 1a:9e:e6:74:49:04:7f:58:f0:c0:42:d5:96:ef:9c: 27:2a:ca:a8:cd:52:9c:e6:33:b7:7e:06:21:73:5c: 0b:75:39:12:fc:51:bf:ef:1c:fd:e2:d3:81:d9:f3: 09:f5:da:85:6b:ba:72:f2:9b:73:95:4b:a2:a1:c5: 0d:4a:3d:39:b6:d8:7a:6e:30:b0:d9:4a:37:01:9d: 9c:cb:59:f3:0e:b4:58:54:1f:cd:5f:6e:11:bb:02: 03:6b:4c:5f:71:76:d1:83:3c:bb:fe:ce:45:9a:df: c1:dc:7b:23:66:c3:8b:92:46:ba:3f:11:5b:14:9e: c6:27:48:b1:9f:8e:25:16:f7:71:27:d5:19:8e:7d: 00:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:59:7C:CD:63:E0:91:C0:6B:39:42:F5:4B:20:52:3A:A1:BC:9E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/9849ddaa-8519-3b7c-bbc5-af656b2f8c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl X509v3 Authority Key Identifier: keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer sbgp-ipAddrBlock: critical IPv4: 130.248.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:28:b7:9e:16:91:6b:d5:82:a0:43:76:91:5b:e6:5b:62:ed: 20:19:a9:20:dc:ca:9d:c1:98:74:cd:bc:8e:90:65:05:06:28: 98:7a:a2:51:e2:90:3e:52:51:d8:24:26:e6:17:63:32:3d:3c: e0:f3:6e:09:9c:46:27:b8:1a:ff:17:78:b4:c5:15:12:f2:76: 3b:d8:4b:6f:06:4a:30:a7:01:a6:4d:7a:07:9f:5d:75:1f:42: 9f:bd:8f:58:d1:48:91:85:5a:31:a0:15:7a:04:e9:55:8a:ed: 51:80:37:5a:30:df:bc:9e:c9:eb:93:8c:a5:82:01:c1:9d:ed: e6:67:aa:d3:4d:e7:8a:ec:55:8b:9b:f3:e3:02:8f:89:da:21: 32:b8:b3:ed:c1:97:c0:bc:e7:99:7a:74:fa:cf:a4:cd:6e:85: 06:b2:68:7e:12:5a:8d:d0:ff:40:0e:49:c3:eb:48:f1:96:f2: 15:58:9a:75:24:b1:ab:5f:5b:74:60:91:b5:c1:9d:18:b0:2f: cb:e9:43:8a:bd:23:60:16:e4:e1:4b:a6:b2:30:81:99:90:8c: 80:43:57:b8:a8:a0:28:a9:2e:8e:82:ea:f6:82:16:3f:62:91: 48:ea:cc:05:4f:e3:58:8f:43:12:fa:93:84:bf:53:cc:c3:f2: 59:89:7e:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9IDWaIQ5MLY+tORPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiNDJmN2QtYTJhNS00YmEzLTljNTctZDVjM2VlMjUx MmJkMB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk YjViZTdlNjgtZTAwNS00NTlkLWEyMDctYmZhNGRmNDhhYjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupeJbRHb6X1awDkfwRX7hzM7d150FDGHLboo SCsEyIga4Sz7uVPQn6FXSpvJIR4WQJzG3iKv0E/w5/jn27tXHrjWbqiNq8aaPcBK 5gYNVOnn8f/G4gYbMZJIfosy/uTBPI58eh5xxZWlvk0G7rA53n6XVPUV3SYanuZ0 SQR/WPDAQtWW75wnKsqozVKc5jO3fgYhc1wLdTkS/FG/7xz94tOB2fMJ9dqFa7py 8ptzlUuiocUNSj05tth6bjCw2Uo3AZ2cy1nzDrRYVB/NX24RuwIDa0xfcXbRgzy7 /s5Fmt/B3HsjZsOLkka6PxFbFJ7GJ0ixn44lFvdxJ9UZjn0AvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtZfM1j4JHAazlC9UsgUjqhvJ5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0 MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMzZWUyNTEyYmQvOTg0OWRkYWEtODUxOS0z YjdjLWJiYzUtYWY2NTZiMmY4YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvY2RiNDJmN2QtYTJhNS00YmEzLTlj NTctZDVjM2VlMjUxMmJkL2NkYjQyZjdkLWEyYTUtNGJhMy05YzU3LWQ1YzNlZTI1 MTJiZC5jcmwwHwYDVR0jBBgwFoAUaulHBlh0VLhldP8K7zRC/dSTB4AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jZGI0MmY3ZC1hMmE1LTRiYTMtOWM1Ny1kNWMz ZWUyNTEyYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgvisMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8ot54WkWvVgqBDdpFb5lti7SAZqSDcyp3BmHTNvI6QZQUGKJh6olHi kD5SUdgkJuYXYzI9PODzbgmcRie4Gv8XeLTFFRLydjvYS28GSjCnAaZNegefXXUf Qp+9j1jRSJGFWjGgFXoE6VWK7VGAN1ow37yeyeuTjKWCAcGd7eZnqtNN54rsVYub 8+MCj4naITK4s+3Bl8C855l6dPrPpM1uhQayaH4SWo3Q/0AOScPrSPGW8hVYmnUk satfW3RgkbXBnRiwL8vpQ4q9I2AW5OFLprIwgZmQjIBDV7iooCipLo6C6vaCFj9i kUjqzAVP41iPQxL6k4S/U8zD8lmJfic= -----END CERTIFICATE-----Generated at Mon Sep 28 14:53:49 2026 by rpki-client